CVE-2025-69157

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 06/10/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

36th percentile - higher than 36% of all known CVEs

Summary

Versions of Gamic <= 1.15 are vulnerable to unauthenticated local file inclusion. An attacker can exploit this vulnerability to gain access to system files.

Risk Assessment

Organizations may be exposed to data leakage and unauthorized access to sensitive information stored on the server.

Recommendation

It is recommended to upgrade to the latest version of Gamic to mitigate this vulnerability and implement appropriate security measures.

Other vulnerabilities in Gamic

CVE-2026-62016Critical
PHP Object Injection vulnerability in the Gamic theme in versions up to and including 1.19. It can be exploited without authentication, allowing an attacker to inject a malicious PHP object.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Gamic <= 1.15 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS